Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer (raw, json)
Hash identifier: rar2Eq5u42/vDHN5qpcCil9DhY+L0zyFRh/stAVZH7A=
Subject key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50011040871ECC69C2198CAC8F4D3BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5484
IP: 185.46.216.0/22
IP: 185.128.152.0/23
IP: 2a04:ab40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:11:04:08:71:ec:c6:9c:21:98:ca:c8:f4:d3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:b3:e7:bd:4b:f3:ec:42:f5:78:af:17:8a:
2f:a0:04:a4:2f:98:57:0d:62:4c:7a:b3:0e:c4:21:
0f:fc:2c:f7:c4:c9:f1:87:60:ce:91:1c:5d:e4:12:
74:f5:e7:f3:e4:47:76:8f:1b:d0:bc:16:35:2f:d0:
68:fe:13:6c:ac:e6:a9:af:82:61:57:bb:73:ec:08:
fd:26:80:4a:35:4b:58:e0:36:1a:85:c0:1d:d0:b8:
11:8d:97:73:5e:f2:88:c1:aa:93:f3:57:3a:76:f4:
cb:1f:56:e1:f4:d5:59:1d:6b:ac:50:35:5c:f3:3b:
4c:9f:36:ac:80:56:88:89:d3:bc:f7:c2:90:50:d4:
12:ee:bf:25:20:ef:eb:8d:20:fa:5a:13:91:99:fe:
19:23:eb:53:9e:55:dd:b9:96:5a:c4:ba:90:cc:2b:
0f:9d:a6:62:2a:92:d3:3e:c6:b6:10:82:8a:0b:5c:
70:93:2d:c2:d8:7f:e2:2c:ab:62:87:57:a7:5b:1d:
85:ad:45:10:2e:47:2e:b3:e6:56:0f:92:a5:1c:48:
8c:ac:18:81:89:17:58:36:2e:94:80:1f:8a:49:4b:
08:c2:70:89:6a:74:a3:fd:a0:ec:24:02:95:fe:eb:
b4:c1:f5:cf:df:c8:f0:4b:dc:a2:33:fd:24:3f:2b:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.216.0/22
185.128.152.0/23
IPv6:
2a04:ab40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5484
Signature Algorithm: sha256WithRSAEncryption
7e:22:f3:40:1e:fe:0c:af:1b:9d:c9:49:6c:6d:7b:4a:48:7e:
15:3f:b8:db:cf:8a:2a:7b:de:9d:a8:7b:21:24:d2:59:0a:05:
f4:53:65:9e:2c:27:89:74:0c:cb:aa:53:77:75:44:fa:de:1c:
d8:25:74:a8:ac:e6:5b:3b:e4:a0:d1:12:da:47:ee:a1:fb:58:
17:1e:ce:14:26:c2:cd:e9:ef:61:d8:f8:67:38:62:90:d2:0e:
ce:e7:d1:9e:ec:2a:1a:dd:1c:91:28:c5:76:58:70:7a:96:e6:
3e:3f:8b:78:f7:54:e3:9e:c6:83:4f:02:8c:9b:f2:8f:de:9e:
a8:30:7b:f2:99:37:a8:8e:c2:d1:da:ce:9b:7e:15:ad:1f:58:
d6:10:55:ca:60:1e:3b:fb:16:85:63:ee:b0:78:7e:26:37:a5:
24:d5:7c:17:70:f1:3f:ab:58:23:14:1f:7e:68:d9:23:b0:59:
9d:7d:20:fa:3c:e0:c9:5f:85:6e:9a:1f:3c:ac:70:47:cd:cd:
0e:2b:5c:21:eb:05:77:cd:1d:d0:17:f4:70:5c:17:c1:e1:d1:
81:97:b9:cd:8e:06:6a:23:87:f2:f4:6a:85:2c:a4:59:f8:f8:
9b:7f:6a:65:8f:02:4e:65:7f:04:5f:b2:59:30:0c:c6:3a:f9:
68:11:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:12 2024 by rpki-client on console-fra.rpki-client.org